SurgeryWeb takes privacy and security very seriously, especially when it comes to personal information.
Our website may contain links to other websites, which are provided for your convenience. We are only responsible for the privacy practices and security of this website and not external websites. You should therefore check any other linked website’s privacy policies.
If you have any questions about this policy or the data we hold about you, please contact us at firstname.lastname@example.org
SurgeryWeb are ICO registered.
What we collect and how we use it
Users may visit our website and use it as often as they like without providing any information, however certain services provided via the website do require the processing of personal data.
Our website contains a contact form which collects information such as your name, email address, telephone number and practice name. This information is used for the sole purpose of contacting you to answer any questions you may have about our product or service. By submitting the contact form online, you consent to the use of your details for this purpose.
If you purchase products from SurgeryWeb, you will be asked to provide personal data about you such as your name, job role, email address, telephone number, practice name and address. SurgeryWeb will use such personal data to process your order, deliver the products or services ordered, provide customer care services, provide you with updates/newsletters and maintain a client relationship. By submitting the order/setup form online, you consent to the use of your details for this purpose.
Providing your data to others
This information is not shared with any external third party organisations. We do not use your information for any additional purposes other than delivering our services and because of this, the National Data Opt-Out does not apply to our service.
How we store it
SurgeryWeb will retain your personal data as long as it is required for the purpose for which the data is collected e.g. as necessary to provide you with the services and products requested. Once a contract has been terminated with us, we will retain your personal data for 3 years at which time it will be permanently removed unless statutory retention requirements apply.
We hold your data on a server provided by Catalyst2 and you can see more about their infrastructure and security here – https://www.catalyst2.com/about-us/infrastructure/
The data centre is UK based and all data is encrypted when stored and in transit such as when you submit a form to us. This website is https-secured which means communication between the users web browser and the server hosting this website is encrypted and cannot be intercepted en-route, this can be verified by the padlock icon in the address bar.
Access to your information
In accordance with the Data Protection Act 2018, you have the right to request a copy of the information that we hold about you, if you would like a copy of some or all of your personal information, please contact us at email@example.com.
Erasure of Data (right to be forgotten)
You have the right to have your data erased if the personal data is no longer required for the purpose it was originally collected for, if we are processing the personal data for direct marketing purposes and you object to that processing, or if you believe we are processing your personal data unlawfully.
To request erasure of your personal data, please email firstname.lastname@example.org.
Complaints about the handing of your data
If you have any issue with how your data is being processed, we would recommend you to contact us first, putting your complaint in writing to email@example.com. We take all complaints seriously and do our best to resolve them.
Under the EU General Data Protection Regulation 2016 you have the right to complain to the supervisory authority which in the UK is the Information Commissioners Office (ICO). You can find more details about how to do this on the ICO’s website here: https://ico.org.uk/make-a-complaint/
This policy was last updated on 31/03/2023.